Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: DWxf1zk5SoUDpW/TZMgCmZaYgVkmL9CYUi9fYPOzudc=
Subject key identifier: 56:4A:CE:EE:95:39:B1:02:BB:C2:AB:2E:F5:96:68:54:A0:E9:EB:E8
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 019FA37331633ED367BA2BDE56CA0D350EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 13D4
Signing time: Mon 27 Jul 2026 12:01:03 +0000
Manifest this update: Mon 27 Jul 2026 12:01:03 +0000
Manifest next update: Tue 28 Jul 2026 12:01:03 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: kIck5uvzpwOnUxgOe4yol/yz77eaz/fuT1EyrMLbPuQ=)
2: 8tt6sbRcYdZ62Hlyx9KV5xcE06I.asa (hash: 0Y7iz76vgEOY5ho3DHxIE4tgSCKOh0nYjQCm1eEOdkw=)
3: CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa (hash: 5VuIA/sliXJSN13FjulNtyBF4Z5iaCwmwNeqLvTqwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:31:63:3e:d3:67:ba:2b:de:56:ca:0d:35:0e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Jul 27 12:01:03 2026 GMT
Not After : Jul 28 12:01:03 2026 GMT
Subject: CN=564aceee9539b102bbc2ab2ef5966854a0e9ebe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:7b:69:24:fa:6e:fc:be:5d:cb:fe:da:8e:
61:48:83:79:43:2f:c9:b5:9d:00:78:db:93:57:dd:
93:12:7c:cb:7d:9a:13:7c:f1:b8:4e:80:8c:ec:ae:
a8:c4:79:9a:d0:b1:80:78:c1:13:76:28:5c:78:9f:
84:53:2f:f3:4a:43:ff:21:8c:a7:70:88:dc:e1:da:
9d:8e:47:bf:2a:45:77:7f:c5:61:e1:6f:ee:a0:02:
c7:f1:ca:99:b5:bf:cf:43:da:c5:89:1c:6a:6c:46:
a7:9c:ca:48:cf:cc:32:d5:f7:59:40:b3:76:3b:f1:
f7:e0:41:9c:ee:ab:ca:5e:27:3b:e7:a4:2a:a8:79:
59:d2:8a:1d:5f:63:81:4a:6d:0d:bf:4b:c0:a2:17:
c7:70:2f:a1:2a:cf:d4:63:d0:a2:56:63:33:a6:9a:
6a:df:c3:6a:a0:76:67:d4:fb:6e:10:3a:27:f9:14:
7c:a7:2f:a1:9a:a8:9c:5e:49:c6:05:e6:82:3c:f3:
a9:b9:b6:44:60:ec:d1:e0:6b:56:b2:c0:9c:11:98:
80:4f:54:8e:23:ee:7a:9c:8c:04:a1:ba:1c:b9:26:
23:8c:fe:ac:ee:df:90:1f:7b:c2:15:ff:ea:0c:32:
50:69:c4:f6:f0:a2:7a:a6:31:e6:9e:08:a6:d7:d7:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4A:CE:EE:95:39:B1:02:BB:C2:AB:2E:F5:96:68:54:A0:E9:EB:E8
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7f:7a:96:16:5f:1d:f4:70:20:98:91:49:07:e7:be:8a:62:
cf:da:11:be:3c:55:8e:1d:65:70:3d:0d:9c:c1:6a:1a:73:b9:
3c:d5:81:b9:a9:90:3c:0b:61:95:04:11:79:3c:18:80:38:d8:
6a:f1:0f:c1:20:aa:05:20:8a:17:2b:0e:6d:29:c7:71:46:5d:
e4:02:3f:19:4a:27:e3:e4:87:a6:07:18:46:60:97:db:ac:1a:
62:4e:a2:ee:04:3a:f1:74:c8:20:bf:f9:c1:f6:4b:fc:c2:dd:
f1:dd:a6:0c:1f:65:f9:1f:f9:1c:a9:44:d4:29:a1:43:56:91:
ba:d9:ee:44:8e:dd:e1:ce:cb:d6:53:ad:4d:06:65:29:4f:4b:
3d:bb:ce:b4:30:f6:34:c6:e0:da:a3:87:58:cd:0a:90:49:12:
13:a7:7e:3d:42:0f:86:fe:1c:d1:25:55:28:40:d7:07:ff:c5:
93:41:d7:78:eb:ef:44:45:95:cb:30:3e:5e:5b:8a:9a:8c:4e:
d3:0b:6c:f9:ef:9e:ab:c3:c8:a4:e1:cc:e3:a9:60:6d:2c:89:
cb:24:ec:38:14:0b:e0:c4:7d:94:d2:56:cc:47:7d:7f:f3:90:
07:1e:c6:25:ca:a3:dd:49:61:e2:ba:ab:4f:a8:df:ea:e0:08:
ee:d8:89:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:32:05 2026 by rpki-client